A PCI-minded questionnaire for city payments Wi-Fi asks whether TKIP is an acceptable cipher. What is the correct answer?
Select an answer to reveal the explanation.
Short Explanation
For payments Wi-Fi, TKIP is a hard no. Modern suites expect AES/CCMP-class crypto; a captive portal page, a locked closet, or paperwork does not rehabilitate TKIP.
Full Explanation
PCI-minded questionnaires for city payments Wi-Fi that ask whether TKIP is an acceptable cipher should be answered no—TKIP is not an acceptable modern WLAN cipher choice. Payment-adjacent civic networks especially must avoid deprecated transitional ciphers regardless of portals, PoE, or paperwork claiming compensating controls without real crypto upgrades.
Saying yes if the payments SSID also uses a captive portal disclaimer page confuses legal text with cryptography. Saying yes when the AP is indoors and PoE powered from a locked closet confuses physical controls with cipher strength. Saying yes if the city documents TKIP as a compensating control in the design attempts to paper over a cipher that modern guidance rejects.
Exam caveat: TKIP is not acceptable on modern WLAN cipher questions—particularly near payments use cases.
Operational check: answer the questionnaire with a clear no, confirm the payments SSID uses AES/CCMP under WPA2/WPA3, remove TKIP from the AP, and retain evidence for PCI-minded review. Municipal technicians document the verified setting in the as-built packet so the next shift inherits a known-good civic configuration rather than tribal knowledge. Municipal technicians document the verified setting in the as-built packet so the next shift inherits a known-good civic configuration rather than tribal knowledge.